Designing AI roles and responsibilities

A company doesn't become AI-operated by creating dozens of Bots. Start with what each role may do, must deliver, and must send to a human for approval.

A practical role card

Field	Example
Role	Customer-email assistant
Input	Authorized messages in a dedicated mailbox
Output	Classified requests and reply drafts
Tools	Scoped Mail / Task MCP
Never do	Approve quotes or change payment details
Acceptance	Human reviews before external delivery

Principle

Enforce permissions in the underlying systems; prompt instructions are not access controls.

This is a public example, not a claim about every Bot in Nuwa's actual setup.